Senior Third Party Risk Management Lead

Job not on LinkedIn

🕒 July 22

🇺🇸 United States – Remote

💵 $125k - $180k / year

⏰ Full Time

🟠 Senior

🔒 Insurance

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 52%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Open for 116 days.
• Jobs at this company usually fill in 31 days.
• Reposted 2 times.

Apply Now

Check your resume score

Customize resume + cover letter

Find Similar Remote Jobs

☆ Save☑️ Mark as applied❌ Hide

Report problem

CrowdStrike

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

Founded 2011

🔒 Cybersecurity

☁️ SaaS

🤖 Artificial Intelligence

Cybersecurity • SaaS • Artificial Intelligence

CrowdStrike is a cybersecurity company that provides cloud-based security services to stop breaches. It is recognized as a leader in endpoint protection, identity and cloud security, and managed detection and response. CrowdStrike's platform, Falcon, integrates artificial intelligence to offer real-time visibility, detection, and protection against sophisticated cyber threats. The company is lauded for its effectiveness in securing networks and data, making it a trusted partner for businesses worldwide.

📋 Description

• Drive the strategy, architecture, and technical execution of CrowdStrike’s vendor risk ecosystem • Serve as the functional owner, technical architect, and principal subject matter expert for ServiceNow as the TPRM platform of record • Partner with IT to configure, optimize, and expand workflows • Architect and implement AI-driven capabilities to enhance risk scoring, continuous vendor monitoring, and system efficiency • Manage day-to-day operations of the TPRM assessment pipeline, including queue and capacity management, SLA tracking, and final reviews and approvals • Lead technical implementation of process improvements and expand automation capabilities within ServiceNow • Architect and optimize the end-to-end vendor risk lifecycle, including onboarding, inherent risk tiering, reassessment, and offboarding • Own story creation, liaise with the development team, and oversee sprint and epic development • Partner with Procurement, Legal, IT, and Security engineering teams to embed technical risk considerations and automated security checks into the vendor engagement pipeline • Oversee third-party control evaluations and audits, tooling implementation, and internal and external audit support • Develop and maintain technical TPRM policies, standards, and procedures aligned with NIST, ISO 27001, SOC 2, and FAIR • Engineer and track automated KPIs, metrics, and dashboards for senior leadership

🎯 Requirements

• 10+ years of experience in Third Party Risk Management, GRC, information security risk, or related technical controls disciplines • Proven, hands-on administrative or architectural experience with the ServiceNow Third Party Risk Management (TPRM) module • 3+ years of experience acting as a technical lead, process architect, or principal SME driving operational efficiency and automation within a risk or compliance program • Strong, practical understanding of security and compliance frameworks, including NIST CSF, CSA’s CCM, ISO 27001, SOC 2, NIST 800-53, and/or SIG or CAIQ • Experience with or a strong background in evaluating and integrating AI/ML tools and emerging threat intelligence platforms into GRC workflows • Proven experience project-managing complex technical implementations, including scoping, work breakdown, critical path analysis, and quality assurance • Excellent stakeholder management skills with the ability to translate highly technical risk concepts and system architectures for business audiences and senior leadership • Ability to operate and engineer solutions effectively in a fast-paced, high-growth, global technology environment • Experience operating within a cloud environment and familiarity with CrowdStrike products or services • Experience with continuous monitoring through integrating data with security operations teams • Practical experience in Software Development and Secure Coding best practices • Practical experience performing integration risk assessments and threat modeling for third-party software components • CrowdStrike participates in the E-Verify program

🏖️ Benefits

• Market leader in compensation and equity awards • Comprehensive physical and mental wellness programs • Competitive vacation and holidays for recharge • Paid parental and adoption leaves • Professional development opportunities for all employees regardless of level or role • Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections • Vibrant office culture with world class amenities • Health insurance • 401k • Paid time off • Eligibility for bonuses • Equity grants

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume